Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3138332e39312e3134342e302f32302d3230203d3e203130323132.roa
File:                     3138332e39312e3134342e302f32302d3230203d3e203130323132.roa (raw, json)
Hash identifier:          NB/J1Zk2dZjwVo0k+XibBKzCrRWKohNWM4aRX6t7nvg=
Subject key identifier:   75:77:DD:3F:45:FB:85:AB:9F:AB:F5:79:98:1D:81:1F:C5:AB:43:07
Certificate issuer:       /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial:       2216F17167A7308ED10E80282FFE2D40F4A6C6CF
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3138332e39312e3134342e302f32302d3230203d3e203130323132.roa
Signing time:             Tue 28 Apr 2026 07:28:27 +0000
ROA not before:           Tue 28 Apr 2026 07:23:27 +0000
ROA not after:            Tue 27 Apr 2027 07:28:27 +0000
asID:                     10212
IP address blocks:        183.91.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:16:f1:71:67:a7:30:8e:d1:0e:80:28:2f:fe:2d:40:f4:a6:c6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
        Validity
            Not Before: Apr 28 07:23:27 2026 GMT
            Not After : Apr 27 07:28:27 2027 GMT
        Subject: CN=7577DD3F45FB85AB9FABF579981D811FC5AB4307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cb:34:9f:86:14:98:c3:ac:15:d7:5c:30:9b:
                    2c:c3:79:02:3f:02:d9:ab:a7:47:3e:92:4a:83:60:
                    4c:15:7b:7a:27:1e:46:18:9e:55:70:bd:be:36:c0:
                    14:b0:90:21:47:9f:36:fb:7a:11:1b:1a:ba:47:06:
                    4f:b8:d1:c1:2e:e5:38:87:1f:0a:16:de:75:61:89:
                    49:80:ad:75:db:e1:3c:cd:9a:5c:c4:7c:54:74:21:
                    3d:d5:32:f1:2b:28:8d:0d:dc:36:54:5d:0d:ba:13:
                    d4:5d:84:c7:f6:b2:d1:9b:a1:d6:d4:07:3b:68:b8:
                    31:48:e7:ea:79:d1:f9:ac:4a:00:69:7c:6a:64:62:
                    61:87:80:7c:59:bc:f7:1b:4c:1c:b5:cc:63:4a:c4:
                    cf:f3:5d:eb:84:59:30:cf:52:db:18:7f:60:27:62:
                    1a:71:17:63:a6:18:e0:1f:44:46:e4:8e:41:fb:12:
                    05:f1:c1:cf:5e:4a:f3:40:7d:13:d6:1f:87:ce:eb:
                    1f:94:c9:33:e7:4a:3a:51:70:fc:c4:51:33:eb:78:
                    cc:c4:34:22:f1:02:3e:d7:d6:b1:bb:ac:b2:a6:e8:
                    1d:41:63:b3:f0:75:e5:22:f1:1c:1a:5b:77:e3:03:
                    5d:19:77:0d:d9:1b:46:07:b9:3e:ab:66:5a:fc:18:
                    b9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:77:DD:3F:45:FB:85:AB:9F:AB:F5:79:98:1D:81:1F:C5:AB:43:07
            X509v3 Authority Key Identifier:
                keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3138332e39312e3134342e302f32302d3230203d3e203130323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.91.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         89:31:20:68:ce:02:40:9b:fb:b6:08:aa:76:6d:4b:e6:ce:9f:
         b3:fa:b4:eb:45:04:49:83:3d:9a:ed:7e:aa:7d:9f:ab:d3:62:
         f8:45:f5:61:77:7e:df:24:3c:a1:cc:69:a6:98:1e:af:7b:4b:
         9f:b8:5f:55:c2:08:9d:61:dc:3f:46:54:99:9a:7c:1d:a7:c8:
         19:5b:f3:85:d3:4f:99:88:b9:17:3c:cd:a0:75:c8:b0:7d:5d:
         d0:8d:6e:59:00:52:81:e1:81:72:fb:f2:30:dc:39:a9:3e:1c:
         fa:d3:1c:c7:c5:6f:e1:a5:41:bc:b3:0e:6f:c5:84:a2:6a:35:
         8a:2b:a3:c4:ae:04:70:92:45:20:0f:7f:9a:8d:d7:e5:df:78:
         b3:b3:64:a8:b3:b3:53:46:9b:64:5b:6a:7f:85:33:8a:48:07:
         ff:17:d1:bb:4a:27:f7:49:89:d8:6a:b7:ff:6f:e8:86:ec:da:
         17:b0:20:1c:30:6d:02:bc:0e:69:1f:ab:d6:6e:a9:e8:37:5f:
         33:78:9a:64:c2:0c:42:c6:11:3d:c6:35:b4:8a:7c:96:33:25:
         ba:c0:b1:17:0c:44:dd:63:a4:ac:34:4c:2f:1a:e4:b0:34:a4:
         be:6f:1e:30:1b:bf:7e:40:2b:d4:8c:b2:fe:12:f1:81:8c:29:
         5e:e5:b5:64
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 19:36:11 2026 by rpki-client